[PR] RANGER-5225: Override policy should take precedence over normal deny … [ranger]

["fateh288 (via GitHub)" <gi...@apache.org>]

fateh288 opened a new pull request, #602:
URL: https://github.com/apache/ranger/pull/602

   …policy
   
   ## What changes were proposed in this pull request?
   
   Steps to reproduce:
   Tag an hdfs path /override-path in atlas as PII
   Deny PII policy for user userx
   Allow override policy for user userx
   hdfs dfs -ls /override-path
   User gets access denied. 
   Expected behavior is access allowed
   
   Behavior also reproducible by additional unit tests in policy engine
   
   The PR fixes the bug wherein allow result overrides the previous deny result if priority of allow policy is greater than the priority of the deny policy
   
   ## How was this patch tested?
   
   Added new unit tests which failed without the proposed changes.
   The new unit tests pass after the bug fix.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ranger.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] RANGER-5225: Override policy should take precedence over normal deny … [ranger]

["kumaab (via GitHub)" <gi...@apache.org>]

kumaab merged PR #602:
URL: https://github.com/apache/ranger/pull/602


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ranger.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org